Privacy Notice

1. We are the data controller

The University of the Faroe Islands is the data controller for the processing of the personal data that we have received about you. If you have questions in connection with the processing of personal data, data security or a possible personal data breach, you are welcome to contact the University:

Fróðskaparsetur Føroya

J. C. Svabos gøta 14

P.O. Box 272

FO-110 Tórshavn

Tel.: +298 352500

Email: DPO@setur.fo

If you have questions about our processing of your personal data, you are also welcome to contact our data protection officer:

•        By email: Send an email to DPO@setur.fo with the subject line "Att. dátuverndarfólk".
•        By telephone: You can call the University on +298 352500
•        By letter: Fróðskaparsetur Føroya, J. C. Svabos gøta 14, P.O. Box 272, FO-110 Tórshavn, Att: Dátuverndarfólk

When does the University of the Faroe Islands process personal data about you

The University of the Faroe Islands processes personal data about you in connection with the activities of the University, including the tasks that we, as a university, are obliged to perform, and the services that the University is obliged to provide to you or has decided to provide to you. This includes many different services, ranging from programmes such as bachelor’s, master’s and diploma programmes, various minor subjects and single-course study, etc., to PhD research and research collaborations, as well as all other offers, services and obligations that the University provides to students, researchers and partners.

It may be that the University has entered into an agreement with you, and that it is therefore necessary for us to obtain personal data about you.

It may also be that you have sent the University an enquiry, an application, a complaint, a job application, etc., which means that the University must process what you submit as a case file. This means that your personal data will be processed.

The University may also process any case files in which you are a party to the files. In such cases, your personal data will also be processed.

The purposes of, and legal basis for, the processing of your personal data

The University of the Faroe Islands must provide students and partners with all legally prescribed services and benefits, and it is therefore necessary for the University to process your personal data.

There are several different purposes for processing your personal data:

• The University may have a legal obligation towards you, which means that we process personal data about you.
• There may be tasks that require the processing of your personal data and that are based on the exercise of official authority vested in the University.
• We may also have obtained your consent to process your personal data

Legal basis for our processing

As shown above, the University may process various types of personal data, and the legal basis also varies.

·       The legal basis for the processing of ordinary personal data is in § 8, stk. 1, nr. 1-5, and the legal basis for the processing of sensitive personal data is in § 12, stk. 1, nr. 1-4 and nr. 6-7, and stk. 2, as well as §11, stk. 2 of the Data Protection Act.

·       If we collect and process personal data for statistical purposes, the legal basis is in accordance with the provision in §7 stk. 3 of the Data Protection Act.

Types of personal data

We process the following types of personal data about you:

·       It should be expected that the University of the Faroe Islands processes both ordinary personal data and sensitive personal data about students and partners, depending on what the processing concerns.

Recipients or categories of recipients

As a general rule, the University of the Faroe Islands does not disclose personal data that the University has collected in connection with specific case processing.

In certain cases, however, it is necessary, in order to comply with obligations under, for example, the Public Administration Act or the Act on Public Access, etc., for us to send personal data to another public authority or to a third party. In such cases, only the necessary data is disclosed.

In addition, in some cases we use data processors who help us process your personal data properly and securely. This may include, among other things, the storage of personal data, or situations where we receive assistance from external advisers for case processing.

Transfer to recipients abroad, third countries or international organisations

As a general rule, the University of the Faroe Islands does not use suppliers or data processors established outside the EU/EEA (third countries). This may, however, occur in individual cases, such as in relation to social media, where the recipient is in the USA.

If we transfer your personal data outside the EU/EEA, we will ensure that there is an adequate legal basis for the transfer. This means that we will ensure that the level of protection for your personal data is adequate.

The University of the Faroe Islands uses Facebook

The University of the Faroe Islands has a Facebook page that is used for information and various announcements. You should be aware that Facebook collects personal data about you by using cookies when you use the University’s Facebook page. This means that we may receive statistics about visitors to the page, and Facebook uses this information to customise your profile and to know which advertisements you should see.

If you see the content that is posted on Facebook, this is probably because you have registered your profile on Facebook and have accepted Facebook’s policy.

You can read more about Facebook’s cookie policy here.

From where the personal data originates

The University obtains your personal data, and in most cases, it comes directly from you, but it may also come from others.

In some cases, the University of the Faroe Islands receives personal data about you if we are to process a case in which you are, in one way or another, a party. In such cases, the personal data may have come from other public authorities or organisations, such as TAKS, the National Population Register, or from the person who has brought the case before the University.

You always have the right to know from where we obtain personal data about you.

The duration for which personal data is stored

The University of the Faroe Islands has a duty to ensure that personal data is stored in such a way that it is not possible to identify the data subject for longer than is necessary with regards to the purpose of the processing.

As a public authority, the University of the Faroe Islands registers incoming and outgoing correspondence. In this connection, the University of the Faroe Islands follows the applicable guidelines for how long the personal data must be stored.

Under the Public Administration Act, the Archives Act, and other applicable legislations, the University of the Faroe Islands has a duty to preserve personal data in some case files. The University’s case files are transferred to storage at the National Archives in accordance with the Parliamentary Act on Archives. Once the personal data has been stored at the National Archives or disposed of, the University of the Faroe Islands no longer has access to the data.

Job applications from applicants who were not offered employment by the University are deleted one year after the University of the Faroe Islands made its decision.

Your rights

Under the Data Protection Act, you have rights in connection with our processing of your personal data.

The Data Protection Act gives data subjects certain rights. These are set out in Chapter 4 of the Data Protection Act. The rights under the Data Protection Act are described below. The rights are not unconditional, and whether a specific request can be complied with depends on the specific case and the specific request.

If you wish to exercise your rights, you must contact us; see the contact details in sections 1 and 2.

Right to information, access, rectification and erasure

Right to information (§§ 23-25)

You have the right to receive information about the processing of your personal data.

Right of access (§ 26)

You have the right to access the personal data that we process about you.

Right to rectification (§ 27)

You have the right to have incorrect personal data about yourself corrected.

Right to erasure (§ 28)

In certain circumstances, you have the right to have your personal data erased before the expiry of our normal retention period. This right is not absolute. Other legislation, contractual obligations or specific purposes may require the University to continue retaining and processing your personal data.

Right to restriction of processing, data portability and objection

Right to restriction of processing (§ 29)

In some cases, you have the right to have the processing of your personal data restricted. If you have the right to have processing restricted, we may, in principle, only store the personal data in the future.

Right to data portability (§ 31)

In some cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format, and to have this personal data transferred from one data controller to another without hindrance.

Right to object (§ 32)

In some cases, you have the right to object to our processing of your personal data.

You can also object to our processing of your personal data for direct marketing.

12. Right to withdraw consent

The data subject may withdraw consent at any time. If the data subject withdraws consent, processing based on consent must stop. If you choose to withdraw your consent, this does not affect the lawfulness of our processing of your personal data up to the withdrawal. The withdrawal applies only from the time it is made.

You can withdraw consent by contacting the University at setur@setur.fo or by telephone on +298 352500.

Complaint with the Data Protection Authority

Under § 76 of the Data Protection Act, you may complain to the Data Protection Authority if you are dissatisfied with the processing of your personal data.

If you believe that the University of the Faroe Islands does not process your personal data in accordance with the rules in the Data Protection Act, you have the right to complain to the Data Protection Authority in this regard. You can complain about processing by contacting the Data Protection Authority at dat@dat.fo or by telephone on +298 30 91 00. The office is open on weekdays between 9:00 and 15:00. The website of the Data Protection Authority is www.dat.fo.

---------

This Privacy Notice is reviewed and approved annually by the University's management.